This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/5B7F22440AF811ECB423A671C4F9AE02.roa File: 5B7F22440AF811ECB423A671C4F9AE02.roa (raw, json) Hash identifier: C8GOv0mgtCfvVDO9P+OpNoWQz5Mw66iUgp/UihX7iUw= Subject key identifier: 46:1D:CE:DC:BB:4C:11:83:E5:B4:4F:ED:50:5A:D0:7E:05:88:08:4B Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Certificate serial: 284A Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/5B7F22440AF811ECB423A671C4F9AE02.roa Signing time: Tue 18 Nov 2025 05:02:17 +0000 ROA not before: Tue 18 Nov 2025 05:02:17 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 17470 IP address blocks: 43.252.12.0/22 maxlen: 22 43.252.12.0/24 maxlen: 24 43.252.13.0/24 maxlen: 24 43.252.14.0/24 maxlen: 24 43.252.15.0/24 maxlen: 24 103.247.48.0/22 maxlen: 22 103.247.48.0/24 maxlen: 24 103.247.49.0/24 maxlen: 24 103.247.50.0/24 maxlen: 24 103.247.51.0/24 maxlen: 24 203.189.184.0/21 maxlen: 21 203.189.184.0/24 maxlen: 24 203.189.185.0/24 maxlen: 24 203.189.186.0/24 maxlen: 24 203.189.187.0/24 maxlen: 24 203.189.188.0/24 maxlen: 24 203.189.189.0/24 maxlen: 24 203.189.190.0/24 maxlen: 24 203.189.191.0/24 maxlen: 24 2404:8a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10314 (0x284a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650 Validity Not Before: Nov 18 05:02:17 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=691bfdd8-d142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8f:56:b6:d8:c8:8b:c7:7b:0b:36:ba:fb:bb: 1c:23:f9:ab:33:92:10:92:c4:4c:5c:74:f4:9c:dc: 08:4c:13:fe:1d:a8:df:f8:35:86:3b:0e:0b:9c:72: 9b:ba:ca:37:61:49:41:2b:99:e7:f3:97:17:a1:27: c7:cf:6b:40:db:64:b9:03:7f:02:e0:62:80:ad:ce: 00:da:d4:36:84:2c:10:67:a0:51:29:c4:8b:39:52: 17:1a:c8:6a:c3:58:f2:cb:fe:f1:2c:4e:a4:f0:ab: 18:4c:97:23:2f:7b:2f:36:db:73:20:38:56:8d:f6: fc:74:02:a8:dc:da:30:fb:31:f2:d5:62:9b:c7:3a: f0:bb:66:90:a6:de:5f:c3:de:bb:13:33:35:fd:a9: 86:6f:e8:fe:7e:ec:91:b1:53:09:53:84:89:9b:3c: 89:f8:3d:da:eb:bd:44:4a:41:d7:a9:15:1c:a3:0a: c7:03:c8:bf:31:c8:1c:62:4d:3a:d8:6a:54:c4:d1: fd:7e:2c:9f:89:f3:ce:ad:26:d3:db:0e:80:e5:69: 8b:12:75:08:a9:c2:29:c2:e1:71:ef:6c:42:4e:31: 49:ff:30:fd:ea:7d:b5:6d:ac:12:11:ee:d3:5b:8f: 4b:f8:9f:18:e6:63:12:e4:a2:5a:37:89:2d:ba:d1: 88:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1D:CE:DC:BB:4C:11:83:E5:B4:4F:ED:50:5A:D0:7E:05:88:08:4B X509v3 Authority Key Identifier: keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/5B7F22440AF811ECB423A671C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.12.0/22 103.247.48.0/22 203.189.184.0/21 IPv6: 2404:8a00::/48 Signature Algorithm: sha256WithRSAEncryption 8c:e9:31:cf:a9:dd:64:5f:a6:fe:db:2b:34:80:82:4e:5a:04: 91:be:bb:86:42:a9:e4:60:cb:16:a1:ae:27:69:c3:4c:33:19: 29:ac:63:08:77:61:20:e3:89:9c:c7:83:5a:35:ed:05:8b:b6: bb:95:a4:1a:af:3e:75:0c:04:c9:11:86:20:a4:03:49:44:87: 2d:69:51:93:b4:23:22:a4:a7:01:cd:80:86:3f:e9:ff:b4:60: 71:26:59:5f:44:5f:9d:1b:6f:1b:4a:02:f3:cf:18:03:be:c3: 68:32:5e:96:c3:06:05:36:93:2c:aa:a0:a3:86:71:02:f6:32: 23:07:ae:2b:51:dc:1f:e6:7e:6e:8e:ec:54:26:37:e8:23:92: 6f:cb:a2:4e:5a:68:dd:e1:61:c0:c7:c9:fd:81:54:ce:2c:bf: 97:e4:f1:d1:11:01:c1:0e:cb:90:5e:38:4e:86:fb:0b:0b:f6: ec:b5:7b:ba:45:69:0f:b8:f6:ca:71:9d:b0:d4:98:f2:d6:bf: cf:ef:1f:1f:b9:e6:6d:29:1b:6b:70:b2:65:78:38:a5:98:b9: db:ec:30:9b:a3:18:0f:0e:4a:f3:c9:14:81:6d:c4:4c:db:80: 52:86:31:cc:14:8c:68:10:31:60:f6:71:b7:6c:47:c4:25:7a: 26:9d:65:50 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICKEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2 QzdDMjA2NTAwHhcNMjUxMTE4MDUwMjE3WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTFiZmRkOC1kMTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2o9WttjIi8d7Cza6+7scI/mrM5IQksRMXHT0nNwITBP+Hajf+DWGOw4LnHKb uso3YUlBK5nn85cXoSfHz2tA22S5A38C4GKArc4A2tQ2hCwQZ6BRKcSLOVIXGshq w1jyy/7xLE6k8KsYTJcjL3svNttzIDhWjfb8dAKo3Now+zHy1WKbxzrwu2aQpt5f w967EzM1/amGb+j+fuyRsVMJU4SJmzyJ+D3a671ESkHXqRUcowrHA8i/McgcYk06 2GpUxNH9fiyfifPOrSbT2w6A5WmLEnUIqcIpwuFx72xCTjFJ/zD96n21bawSEe7T W49L+J8Y5mMS5KJaN4ktutGIpQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFEYdzty7 TBGD5bRP7VBa0H4FiAhLMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRBNkIvNzUyNDRCNjJBMTYzMTFFNEI5NjZERDBGQzRGOUFFMDIvNUI3RjIyNDQw QUY4MTFFQ0I0MjNBNjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAIr/AwDBAJn9zADBAPLvbgwDwQCAAIwCQMHACQEigAAADAN BgkqhkiG9w0BAQsFAAOCAQEAjOkxz6ndZF+m/tsrNICCTloEkb67hkKp5GDLFqGu J2nDTDMZKaxjCHdhIOOJnMeDWjXtBYu2u5WkGq8+dQwEyRGGIKQDSUSHLWlRk7Qj IqSnAc2Ahj/p/7RgcSZZX0RfnRtvG0oC888YA77DaDJelsMGBTaTLKqgo4ZxAvYy IweuK1HcH+Z+bo7sVCY36COSb8uiTlpo3eFhwMfJ/YFUziy/l+Tx0REBwQ7LkF44 Tob7Cwv27LV7ukVpD7j2ynGdsNSY8ta/z+8fH7nmbSkba3CyZXg4pZi52+wwm6MY Dw5K88kUgW3ETNuAUoYxzBSMaBAxYPZxt2xHxCV6Jp1lUA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:26:39 2025 by rpki-client